Security Advisory

CVE-2024-52328

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-23 16:35:23
Last updated 2025-02-12 20:41:29
Assigner cisa-cg
State PUBLISHED

Description

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.